31 May
2014
31 May
'14
9:17 a.m.
Alan Buxey wrote:
AAAA record should be used first if present. But if there's an a A and AAAA then both should be used too , ie in client or proxy mode - we have dual stack and gave both v6 and v4 defined to give us routing resiliency
That's a possibility, but better suited for RadSec TBH. Otherwise you'll have the same shared secret for two clients.
Also... if the address doesn't resolve the server fails to start? Ouch.
Too bad. If the address doesn't resolve, then you shouldn't be listing the clients in DNS. RADIUS depends on IP addresses. Alan DeKok.